Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d0f349ba-2ea6-457c-a3d3-d1a04be905c1.roa
File:                     d0f349ba-2ea6-457c-a3d3-d1a04be905c1.roa (raw, json)
Hash identifier:          FyzwjiVTRBvO4Et9Vye521SXjPPr9DlIKNN9ootNeyo=
Subject key identifier:   3B:E3:48:D4:1D:37:88:A8:C5:1C:08:29:DF:2B:39:AD:B3:BC:71:AD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2CBA83593CAE07CDE3FFE9285313297E10180650
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d0f349ba-2ea6-457c-a3d3-d1a04be905c1.roa
Signing time:             Thu 30 Oct 2025 23:10:24 +0000
ROA not before:           Thu 30 Oct 2025 23:10:24 +0000
ROA not after:            Thu 04 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b7a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ba:83:59:3c:ae:07:cd:e3:ff:e9:28:53:13:29:7e:10:18:06:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 30 23:10:24 2025 GMT
            Not After : Dec  4 23:59:59 2025 GMT
        Subject: serialNumber=161d295a7d8e6169d36884080524ba35f77b677e790ff98e444d17ffb6571599, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3c:bf:4c:69:88:a1:87:e7:d5:e0:62:63:09:
                    bb:0d:26:e8:84:fb:58:aa:fd:0f:ee:97:38:4f:a5:
                    92:6e:4f:27:8f:23:40:d1:97:a9:32:80:83:dc:44:
                    f6:4a:17:97:5e:90:3a:80:8e:a4:d4:75:59:33:c4:
                    32:9d:47:bd:22:69:d4:0a:aa:ad:f7:3e:04:0c:c1:
                    3d:27:ab:68:f5:13:bd:78:2f:b2:97:8c:02:28:e7:
                    33:66:92:fe:a4:dc:c6:39:55:09:10:e9:b8:6c:1f:
                    23:6d:a6:ca:e7:48:ad:2f:fc:73:bd:b0:4a:d3:85:
                    da:c4:e2:9e:df:4d:16:7d:48:2a:30:68:d5:5f:4b:
                    fc:74:9f:f7:99:ec:e5:92:88:60:58:f3:a5:34:f2:
                    dd:89:9d:eb:08:5d:a9:05:6b:c0:ff:84:cd:e8:a3:
                    de:57:8e:bd:d6:da:b2:da:46:01:b4:10:9b:49:03:
                    e8:4d:c1:50:8a:d2:28:81:a0:11:54:14:0a:60:1e:
                    a4:cf:fd:6f:08:0e:fe:4f:c7:81:08:16:f9:74:e7:
                    5c:f9:3d:17:46:36:60:2a:26:0e:41:99:90:a4:4b:
                    40:67:00:b9:78:0a:1f:b8:c0:25:99:33:7a:e6:7b:
                    8a:cd:1c:cc:ea:a0:a5:57:c0:5c:f3:04:95:05:13:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E3:48:D4:1D:37:88:A8:C5:1C:08:29:DF:2B:39:AD:B3:BC:71:AD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d0f349ba-2ea6-457c-a3d3-d1a04be905c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b7a::/47

    Signature Algorithm: sha256WithRSAEncryption
         95:cc:5b:9c:0b:fc:08:97:20:55:9a:ba:9d:97:c5:2b:b9:f9:
         da:e7:01:3e:8c:4f:7d:88:a5:20:d0:0f:c4:c9:30:f4:63:69:
         ac:e7:7a:79:0a:85:0c:22:4c:b0:ee:72:32:1a:6c:2a:ee:63:
         a4:2c:61:1f:41:0c:61:4f:b0:63:3c:16:90:93:c6:77:fd:50:
         c3:19:ef:e1:ca:89:8a:00:26:3f:fd:59:ac:5d:93:4a:0d:d8:
         bd:91:01:f2:47:14:f9:4c:aa:14:62:eb:c2:d1:7a:83:37:17:
         95:dc:bb:b7:6e:80:8a:38:2c:e7:ed:8d:66:7a:a4:db:59:70:
         fd:2a:3c:2d:fc:83:ce:65:7d:c8:68:dc:57:7b:2d:ea:e5:51:
         f3:d7:3a:a8:8a:29:ef:41:44:7b:25:51:3e:70:1b:1a:d7:1d:
         57:24:36:ee:2d:2e:08:9b:9d:ab:be:36:05:75:7a:0f:f9:b6:
         42:e0:72:86:89:17:b5:2c:64:11:c3:c8:75:84:47:77:e8:cf:
         9a:b4:a5:1a:70:a5:9a:81:94:b5:30:9f:8c:1b:9c:cf:96:84:
         9b:07:a8:88:88:94:11:f4:e5:9f:97:f8:06:ed:d3:f0:0d:c6:
         4a:fb:8a:81:f6:5b:3e:30:30:ec:d6:1b:21:1e:35:33:d6:fd:
         3d:0b:9f:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:14 2025 by rpki-client